5.5
CVSSv3

CVE-2017-6693

Published: 13/06/2017 Updated: 03/10/2019
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local malicious user to access information stored in the file system of an affected system, aka Unauthorized Directory Access. More Information: CSCvd76286. Known Affected Releases: 2.2(9.76) 2.3(1).

Vulnerable Product Search on Vulmon Subscribe to Product

cisco elastic services controller 2.2\\(9.76\\)

cisco elastic services controller 2.3\\(1\\)

Vendor Advisories

A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local attacker to access information stored in the file system of an affected system The vulnerability exists because the affected component does not sufficiently protect files that are stored in the file system An attacker could exp ...